PSE-Strata Exam Dumps Pass with Updated 2022 Certified Exam Questions
PSE-Strata Exam Questions - Real & Updated Questions PDF
NEW QUESTION 25
Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)
- A. validate credential submission detection
- B. enable App-ID
- C. define an SSL decryption rulebase
- D. define URL Filtering Profile
- E. enable User-ID
Answer: A,D,E
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/prevent-credential-phishing.html
NEW QUESTION 26
Which two products can send logs to the Cortex Data Lake? (Choose two.)
- A. Prisma Access
- B. Prisma Public Cloud
- C. AutoFocus
- D. PA-3260 firewall
Answer: A,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-corte
NEW QUESTION 27
Which three components are specific to the Query Builder found in the Custom Report creation dialog of the firewall? (Choose three.)
- A. Schedule
- B. Recipient
- C. Attribute
- D. Connector
- E. Operator
- F. Database
Answer: C,D,E
NEW QUESTION 28
Which two components must be configured within User-ID on a new firewall that has been implemented?
(Choose two.)
- A. Proxy Authentication
- B. Group Mapping
- C. User Mapping
- D. 802.1X Authentication
Answer: B,C
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/enable-user-id
NEW QUESTION 29
Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls?
(Choose three.)
- A. RADIUS
- B. SNMP server
- C. TACACS
- D. Lotus Domino
- E. eDirectory monitoring
- F. Active Directory monitoring
- G. Client Probing
Answer: A,C,G
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/user-id/user-id-concepts/user-mapping
NEW QUESTION 30
An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category Which two timeframe options are available to send this report? (Choose two.)
- A. Weekly
- B. Daily
- C. Monthly
- D. Bi-weekly
Answer: A,B
NEW QUESTION 31
What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)
- A. It can bootstrap the virtual firewalls for dynamic deployment scenarios.
- B. It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support.
- C. It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary
- D. It can automatically create address groups for use with KVM.
Answer: A,B
NEW QUESTION 32
What can be applied to prevent users from unknowingly downloading malicious file types from the internet?
- A. An antivirus profile to security policy rules that deny general web access
- B. A vulnerability profile to security policy rules that deny general web access
- C. A zone protection profile to the untrust zone
- D. A file blocking profile to security policy rules that allow general web access
Answer: D
Explanation:
https://docs.paloaltonetworks.com/best-practices/8-1/internet-gateway-best-practices/best-practice-internet-gateway-security-policy/create-best-practice-security-profiles.html
NEW QUESTION 33
For customers with high bandwidth requirements for Service Connections, what two limitations exist when onboarding multiple Service Connections to the same Prisma Access location servicing a single Datacenter? (Choose two.)
- A. Network segments in the Datacenter need to be advertised to only one Service Connection
- B. The resources in the Datacenter will only be able to reach remote network resources that share the same region
- C. The customer edge device needs to support policy-based routing with symmetric return functionality
- D. A maximum of four service connections per Datacenter are supported with this topology
Answer: A,D
NEW QUESTION 34
Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?
- A. M-200
- B. M-600
- C. Panorama VM-Series
- D. M-100
Answer: C
NEW QUESTION 35
Which two components must be configured within User-ID on a new firewall that has been implemented? (Choose two.)
- A. Proxy Authentication
- B. Group Mapping
- C. User Mapping
- D. 802.1X Authentication
Answer: B,C
NEW QUESTION 36
XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy. Which two features must be enabled to meet the customer's requirements? (Choose two.)
- A. HA active/passive
- B. HA active/active
- C. Virtual systems
- D. Policy-based forwarding
Answer: B,D
Explanation:
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/high-availability/route-based-redundancy
NEW QUESTION 37
Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)
- A. validate credential submission detection
- B. enable App-ID
- C. define an SSL decryption rulebase
- D. define URL Filtering Profile
- E. enable User-ID
Answer: A,D,E
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/prevent-credential-phishing.html
NEW QUESTION 38
A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.
Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)
- A. Collects forensic information about the event
- B. Informs WildFire and sends up a signature to the Cloud
- C. Remediates the event by deleting the malicious file
- D. Communicates the status of the endpoint to the ESM
- E. Notifies the user about the event
Answer: A,D,E
NEW QUESTION 39
Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: B
NEW QUESTION 40
A potential customer requires an NGFW solution which enables high-throughput, low-latency network security, all while incorporating unprecedented features and technology. They need a solution that solves the performance problems that plague today's security infrastructure.
Which aspect of the Palo Alto Networks NGFW capabilities can you highlight to help them address the requirements?
- A. SP3 (Single Pass Parallel Processing)
- B. Threat Prevention
- C. Elastic Load Balancers
- D. GlobalProtect
Answer: A
NEW QUESTION 41
Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two.)
- A. Device Tab
- B. Policies Tab
- C. Objects Tab
- D. Network Tab
Answer: A,D
NEW QUESTION 42
Which statement is true about Deviating Devices and metrics?
- A. Deviating Device Tab is only available with a SD-WAN Subscription
- B. A metric health baseline is determined by averaging the health performance for a given metric over seven days plus the standard deviation
- C. Deviating Device Tab is only available for hardware-based firewalls
- D. An Administrator can set the metric health baseline along with a valid standard deviation
Answer: B
NEW QUESTION 43
Prisma SaaS provides which two SaaS threat prevention capabilities? (Choose two)
- A. shellcode protection
- B. WildFire analysis
- C. SaaS AppID signatures
- D. file quarantine
- E. remote procedural call (RPC) interrogation
Answer: B,C
NEW QUESTION 44
What are two core values of the Palo Alto Network Security Operating Platform? (Choose two.}
- A. threat remediation
- B. defense against threats with static security solution
- C. prevention of cyber attacks
- D. safe enablement of all applications
Answer: A,C
NEW QUESTION 45
......
Pass Guaranteed Quiz 2022 Realistic Verified Free Palo Alto Networks: https://www.prep4king.com/PSE-Strata-exam-prep-material.html
Free Palo Alto Networks Systems Engineer PSE-Strata Ultimate Study Guide: https://drive.google.com/open?id=16vjsmsKc3sm7ehrgsjpRX0e8tzmQ0Nz4
